Vulnerabilities > CVE-2023-20227 - Unspecified vulnerability in Cisco IOS XE

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

NVD

Published: 2023-09-27

Updated: 2024-11-21

Summary

A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain L2TP packets. An attacker could exploit this vulnerability by sending crafted L2TP packets to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 16.8.1 Cisco IOS XE 16.8.1A Cisco IOS XE 16.8.1B Cisco IOS XE 16.8.1C Cisco IOS XE 16.8.1D Cisco IOS XE 16.8.1E Cisco IOS XE 16.8.1S Cisco IOS XE 16.8.2 Cisco IOS XE 16.8.3 Cisco IOS XE 16.9.1 Cisco IOS XE 16.9.1A Cisco IOS XE 16.9.1B Cisco IOS XE 16.9.1S Cisco IOS XE 16.9.2 Cisco IOS XE 16.9.3 Cisco IOS XE 16.9.4 Cisco IOS XE 16.9.5 Cisco IOS XE 16.9.5F Cisco IOS XE 16.9.6 Cisco IOS XE 16.9.7 Cisco IOS XE 16.9.8 Cisco IOS XE 16.10.1 Cisco IOS XE 16.10.1A Cisco IOS XE 16.10.1B Cisco IOS XE 16.10.1C Cisco IOS XE 16.10.1D Cisco IOS XE 16.10.1E Cisco IOS XE 16.10.1F Cisco IOS XE 16.10.1G Cisco IOS XE 16.10.1S Cisco IOS XE 16.10.2 Cisco IOS XE 16.10.3 Cisco IOS XE 16.11.1 Cisco IOS XE 16.11.1A Cisco IOS XE 16.11.1B Cisco IOS XE 16.11.1S Cisco IOS XE 16.11.2 Cisco IOS XE 16.12.1 Cisco IOS XE 16.12.1A Cisco IOS XE 16.12.1C Cisco IOS XE 16.12.1S Cisco IOS XE 16.12.1T Cisco IOS XE 16.12.1W Cisco IOS XE 16.12.1X Cisco IOS XE 16.12.1Y Cisco IOS XE 16.12.1Z1 Cisco IOS XE 16.12.1Z2 Cisco IOS XE 16.12.2 Cisco IOS XE 16.12.2A Cisco IOS XE 16.12.2S Cisco IOS XE 16.12.3 Cisco IOS XE 16.12.3S Cisco IOS XE 16.12.4 Cisco IOS XE 16.12.4A Cisco IOS XE 16.12.5 Cisco IOS XE 16.12.5A Cisco IOS XE 16.12.6 Cisco IOS XE 16.12.6A Cisco IOS XE 16.12.7 Cisco IOS XE 16.12.8 Cisco IOS XE 17.1.1 Cisco IOS XE 17.1.1A Cisco IOS XE 17.1.1S Cisco IOS XE 17.1.1T Cisco IOS XE 17.1.3 Cisco IOS XE 17.2.1 Cisco IOS XE 17.2.1A Cisco IOS XE 17.2.1R Cisco IOS XE 17.2.1V Cisco IOS XE 17.2.2 Cisco IOS XE 17.2.3 Cisco IOS XE 17.3.1 Cisco IOS XE 17.3.1A Cisco IOS XE 17.3.1W Cisco IOS XE 17.3.1X Cisco IOS XE 17.3.1Z Cisco IOS XE 17.3.2 Cisco IOS XE 17.3.2A Cisco IOS XE 17.3.3 Cisco IOS XE 17.3.4 Cisco IOS XE 17.3.4A Cisco IOS XE 17.3.4C Cisco IOS XE 17.3.5 Cisco IOS XE 17.3.5A Cisco IOS XE 17.3.5B Cisco IOS XE 17.3.6 Cisco IOS XE 17.3.7 Cisco IOS XE 17.4.1 Cisco IOS XE 17.4.1A Cisco IOS XE 17.4.1B Cisco IOS XE 17.4.2 Cisco IOS XE 17.4.2A Cisco IOS XE 17.5.1 Cisco IOS XE 17.5.1A Cisco IOS XE 17.5.1B Cisco IOS XE 17.5.1C	96
Application	Cisco Cisco Catalyst 8000V Edge - Cisco Cloud Services Router 1000V -	2
Hardware	Cisco Cisco 1000 Integrated Services Router - Cisco 1100 4G Integrated Services Router - Cisco 1100 4Gltegb Integrated Services Router - Cisco 1100 4Gltena Integrated Services Router - Cisco 1100 6G Integrated Services Router - Cisco 4221 Integrated Services Router - Cisco 4321/K9 RF Integrated Services Router - Cisco 4321/K9 WS Integrated Services Router - Cisco 4321/K9 Integrated Services Router - Cisco 4321 Integrated Services Router - Cisco 4331/K9 RF Integrated Services Router - Cisco 4331/K9 WS Integrated Services Router - Cisco 4331/K9 Integrated Services Router - Cisco 4331 Integrated Services Router - Cisco 4351/K9 RF Integrated Services Router - Cisco 4351/K9 WS Integrated Services Router - Cisco 4351/K9 Integrated Services Router - Cisco 4351 Integrated Services Router - Cisco 4431 Integrated Services Router - Cisco 4451 Integrated Services Router - Cisco 4461 Integrated Services Router - Cisco C8200 1N 4T - Cisco C8200L 1N 4T - Cisco C8500L 8S4X - Cisco Catalyst 8300 1N1S 4T2X - Cisco Catalyst 8300 1N1S 6T - Cisco Catalyst 8300 2N2S 4T2X - Cisco Catalyst 8300 2N2S 6T - Cisco Vg400 2Fxs/2Fxo - Cisco Vg400 4Fxs/4Fxo - Cisco Vg400 6Fxs/6Fxo - Cisco Vg400 8Fxs - Cisco Vg420 132Fxs/6Fxo - Cisco Vg420 144Fxs - Cisco Vg420 84Fxs/6Fxo - Cisco Vg450 144Fxs/K9 - Cisco Vg450 72Fxs/K9 - Cisco Vg450/K9 -	38

Summary

Vulnerable Configurations

References